From d71ddb7e264158688d4db426fa0149da9e75b453 Mon Sep 17 00:00:00 2001 From: Bhavin Patel Date: Thu, 28 Jul 2022 13:26:54 -0700 Subject: [PATCH] Update windows_system_reboot_commandline.yml --- detections/endpoint/windows_system_reboot_commandline.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/detections/endpoint/windows_system_reboot_commandline.yml b/detections/endpoint/windows_system_reboot_commandline.yml index 79a4ccb8d9..55ed3995c9 100644 --- a/detections/endpoint/windows_system_reboot_commandline.yml +++ b/detections/endpoint/windows_system_reboot_commandline.yml @@ -43,7 +43,7 @@ tags: impact: 60 kill_chain_phases: - Exploitation - message: process that execute reboot commandline in $dest$ + message: Process $process_name$ that executed reboot via commandline on $dest$ mitre_attack_id: - T1529 nist: